Add TLS-SRP (RFC 5054) support

net/third_party/nss/ssl/sslimpl.h

 /*
  * This file is PRIVATE to SSL and should be the first thing included by
  * any SSL implementation file.
  *
  * ***** BEGIN LICENSE BLOCK *****
  * Version: MPL 1.1/GPL 2.0/LGPL 2.1
  *
  * The contents of this file are subject to the Mozilla Public License Version
  * 1.1 (the "License"); you may not use this file except in compliance with
  * the License. You may obtain a copy of the License at
@@ skipping 299 matching lines @@
     unsigned int    isPresent    :  1;
 #else
     ssl3CipherSuite cipher_suite;
     PRUint8         policy;
     unsigned char   enabled   : 1;
     unsigned char   isPresent : 1;
 #endif
 } ssl3CipherSuiteCfg;
 
 #ifdef NSS_ENABLE_ECC
-#define ssl_V3_SUITES_IMPLEMENTED 50
+#define ssl_V3_SUITES_IMPLEMENTED 59
 #else
-#define ssl_V3_SUITES_IMPLEMENTED 30
+#define ssl_V3_SUITES_IMPLEMENTED 39
 #endif /* NSS_ENABLE_ECC */
 
 typedef struct sslOptionsStr {
     /* For clients, this is a validated list of protocols in preference order
      * and wire format. For servers, this is the list of support protocols,
      * also in wire format. */
     SECItem      nextProtoNego;
 
     unsigned int useSecurity            : 1;  /*  1 */
     unsigned int useSocks               : 1;  /*  2 */
@@ skipping 710 matching lines @@
     sslSendFunc      send;                      /*xmitBufLock*/ /* ssl 2 & 3 */
     int              isServer;                  /* Spec Lock?*/ /* ssl 2 & 3 */
     sslBuffer        writeBuf;                  /*xmitBufLock*/ /* ssl 2 & 3 */
 
     int              cipherType;                                /* ssl 2 & 3 */
     int              keyBits;                                   /* ssl 2 & 3 */
     int              secretKeyBits;                             /* ssl 2 & 3 */
     CERTCertificate *localCert;                                 /* ssl 2 & 3 */
     CERTCertificate *peerCert;                                  /* ssl 2 & 3 */
     SECKEYPublicKey *peerKey;                                   /* ssl3 only */
+    SECItem         *userName;          /* SSL username credential */
+    SECItem         *userPasswd;        /* SSL userpasswd credential */
 
     SSLSignType      authAlgorithm;
     PRUint32         authKeyBits;
     SSLKEAType       keaType;
     PRUint32         keaKeyBits;
 
     /*
     ** Procs used for SID cache (nonce) management. 
     ** Different implementations exist for clients/servers 
     ** The lookup proc is only used for servers.  Baloney!
@@ skipping 89 matching lines @@
     SSLGetPlatformClientAuthData getPlatformClientAuthData;
     void                        *getPlatformClientAuthDataArg;
 #endif  /* NSS_PLATFORM_CLIENT_AUTH */
     SSLSNISocketConfig        sniSocketConfig;
     void                     *sniSocketConfigArg;
     SSLBadCertHandler         handleBadCert;
     void                     *badCertArg;
     SSLHandshakeCallback      handshakeCallback;
     void                     *handshakeCallbackData;
     void                     *pkcs11PinArg;
+    SSLUserPasswdCB           getUserPasswd;
+    void                     *getUserPasswdArg;
+    SSLGetSRPParamsCB         getSRPParams;
+    void                     *getSRPParamsArg;
 
     PRIntervalTime            rTimeout; /* timeout for NSPR I/O */
     PRIntervalTime            wTimeout; /* timeout for NSPR I/O */
     PRIntervalTime            cTimeout; /* timeout for NSPR I/O */
 
     PZLock *      recvLock;     /* lock against multiple reader threads. */
     PZLock *      sendLock;     /* lock against multiple sender threads. */
 
     PZMonitor *   recvBufLock;  /* locks low level recv buffers. */
     PZMonitor *   xmitBufLock;  /* locks low level xmit buffers. */
@@ skipping 647 matching lines @@
 #elif defined(_WIN32_WCE)
 #define SSL_GETPID GetCurrentProcessId
 #elif defined(WIN32)
 extern int __cdecl _getpid(void);
 #define SSL_GETPID _getpid
 #else
 #define SSL_GETPID() 0
 #endif
 
 #endif /* __sslimpl_h_ */